Network Security Engineer

Network Security Architect – Zero Trust / Cisco ACI

Location: 100% Remote – Continental U.S.

Employment Type: Full-Time

Schedule: Wednesday–Sunday or Thursday–Monday (Weekend Cutover Schedule)

Position Summary

We are seeking an experienced Network Security Engineer to support a large-scale Zero Trust architecture implementation within a highly regulated financial services environment.

This is a hands-on architecture role centered around Cisco Application Centric Infrastructure (ACI), data center security, Zero Trust implementation, and critical network cutover events .

This is not a traditional steady-state NOC position. You will operate in high-stakes, time-sensitive maintenance windows where preparation, technical depth, troubleshooting ability, and clear communication are essential.

The ideal candidate is comfortable owning critical network changes, making sound technical decisions under pressure, and working collaboratively with technical teams and business stakeholders.

Key Responsibilities

• Execute readiness assessments ahead of scheduled network cutovers and security policy enforcement windows.
• Validate configurations, dependencies, implementation plans, and rollback procedures before go-live.
• Lead and support live execution of Zero Trust security policy changes and network cutovers .
• Design, operate, and troubleshoot data center security environments utilizing Cisco Application Centric Infrastructure (ACI) .
• Perform application dependency mapping to support cutover planning, policy design, and risk assessment.
• Conduct post-change validation to ensure network functionality and security-policy enforcement meet expected outcomes.
• Diagnose and troubleshoot complex network and security issues during live production events.
• Execute rollback procedures when necessary to protect service availability and business operations.
• Communicate technical status, risks, issues, and remediation plans to both technical and non-technical stakeholders.
• Document readiness assessments, implementation activities, execution results, and post-event findings.
• Maintain accurate project documentation and time tracking.

Required Qualifications

• 3+ years of hands-on experience with Cisco Application Centric Infrastructure (ACI).
• Demonstrated experience designing, operating, and troubleshooting data center security environments .
• Strong experience with traditional data center networking technologies.
• In-depth understanding of data center networking protocols and principles .
• Strong Layer 2/Layer 3 networking knowledge.
• Understanding of Zero Trust architecture and network security principles .
• Experience performing complex network changes and cutovers within production environments.
• Strong troubleshooting capabilities across network and security infrastructure.
• CCNP Route/Switch, CCNP Security, or equivalent demonstrated experience.
• Ability to clearly communicate technical status and risk to non-technical business stakeholders.
• Ability to remain composed and make sound technical decisions during high-pressure production events.
• Ability to work a Wednesday–Sunday or Thursday–Monday schedule supporting weekend cutover windows.
• U.S. citizenship and continental U.S. residency.
• Ability to successfully complete the required Tier II-Credit Check Enhanced federal background investigation , including pre-employment drug screening.
• Strong technical documentation and time-management discipline.

Preferred Qualifications

• Hands-on experience with Cisco Secure Workload (CSW) .
• Experience with Zero Trust and microsegmentation architectures .
• Network automation experience utilizing scripting, orchestration, or network automation technologies.
• In-depth understanding of security protocols and principles.
• Experience working directly with Cisco TAC and driving technical escalations through resolution.
• Ability to independently gather and analyze diagnostic evidence.
• Previous experience supporting financial services or another highly regulated industry .
• Previous federal background investigation or Public Trust experience.

What Makes This Role Different

This position is designed for a Network Security Architect who performs exceptionally well during high-consequence technical events .

Rather than spending the majority of your tim…